Overview

overview

10

Static

static

10

4436-133-0...ry.dll

windows7-x64

1

4436-133-0...ry.dll

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4436-133-0x0000000000D30000-0x0000000000D53000-memory.dmp

  • Size

    140KB

  • MD5

    7d33b2c822d26d16c6e02062154a81c3

  • SHA1

    59139555f33df7e4c321e051e11f9a2899c28258

  • SHA256

    51c267e5aa1553c403bbbc49660b0ca520a6d36350f9e0a35fddd01458bc7a65

  • SHA512

    36b5b04d87af54d69401904ceb777bc41158246ea7cc8c2cff7420a0db1b6dd1a092a7b05335224893741b1d402fcae8ddd4283831c0d60a8f1c593abe37511f

  • SSDEEP

    3072:vMucC9DExaqOALMv/uHWlA3J+ml6MTBfPgM/tL:0w6aq5Mv/DW3JPl6MTBHgM/B

Score
10/10
bb171677767634qakbot

Malware Config

Extracted

Family

qakbot

Version

404.74

Botnet

BB17

Campaign

1677767634

C2

81.157.206.138:2222

50.68.186.195:443

184.176.110.61:61202

71.31.101.183:443

85.231.105.49:2222

62.35.100.38:443

190.141.133.204:443

109.158.144.102:995

82.212.115.116:443

47.21.51.138:995

208.180.17.32:2222

86.130.9.136:2222

184.189.41.80:443

23.242.20.21:443

103.12.133.134:2222

86.225.214.138:2222

12.172.173.82:50001

142.118.243.5:2222

86.208.35.220:2222

47.21.51.138:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 4436-133-0x0000000000D30000-0x0000000000D53000-memory.dmp
    .dll windows x86


    Headers

    Sections